Detecting Open Source Components Built into Mobile Applications

1. A computer-implemented method comprising: obtaining an open source class and archive database; receiving an ANDROID Application Package (APK) comprising a multiplicity of classes and executable by a mobile device running an ANDROID operating system; retrieving at least one class comprised in the APK; matching each of the at least one class against the open source class and archive database, to obtain a corresponding archive collection, such that each archive in the archive collection comprises at least one of the at least one class; for at least two archives from the archive collection being revisions of one another and comprising the same classes, removing an earlier archive and maintaining a later archive of the at least two archives; determining a reduced archive collection, said determining comprising: removing from the corresponding archive collection a first archive comprising a class that is comprised only in the first archive; clustering the corresponding archive collection without the first archive, to obtain a reduced archive collection in respect of the at least one class; and adding the first archive to the reduced archive collection; and reporting the reduced archive collection.

2. A computerized apparatus having a processor, the processor being configured to perform the steps of: obtaining an open source class and archive database; receiving an ANDROID Application Package (APK) comprising a multiplicity of classes and executable by a mobile device running an ANDROID operating system; retrieving by the processor at least one class comprised in the APK; matching by the processor each of the at least one class against the open source class and archive database, to obtain a corresponding archive collection, such that each archive in the archive collection comprises at least one of the at least one class; for at least two archives from the archive collection being revisions of one another and comprising the same classes, removing an earlier archive and maintaining a later archive of the at least two archives; determining a reduced archive collection, said determining comprising: removing from the corresponding archive collection a first archive comprising a class that is comprised only in the first archive; clustering the corresponding archive collection without the first archive, to obtain a reduced archive collection in respect of the at least one class; and adding the first archive to the reduced archive collection; and reporting the reduced archive collection.

3. A computer program product comprising a non-transitory computer readable storage medium retaining program instructions, wherein the program instructions when read by a processor, cause the processor to perform a method comprising: obtaining an open source class and archive database; receiving an ANDROID Application Package (APK) comprising a multiplicity of classes and executable by a mobile device running an ANDROID operating system; retrieving at least one class comprised in the APK; matching each of the at least one class against the open source class and archive database, to obtain a corresponding archive collection, such that each archive in the archive collection comprises at least one of the at least one class; for at least two archives from the archive collection being revisions of one another and comprising the same classes, removing an earlier archive and maintaining a later archive of the at least two archives; determining a reduced archive collection, said determining comprising: removing from the corresponding archive collection a first archive comprising a class that is comprised only in the first archive; clustering the corresponding archive collection without the first archive, to obtain a reduced archive collection in respect of the at least one class; and adding the first archive to the reduced archive collection; and reporting the reduced archive collection.